+ Reply to Thread
Results 1 to 9 of 9
  1. Junior Member
    Join Date
    Jul 2010
    Posts
    15
    #1

    Post How to block a MAC address in the DHCP?

    hi,

    I have a DHCP server and some unknown users are connected to it. I want to block them through MAC address is there any way? or is there any way to block a particular MAC address on my network?
    Reply With Quote Quote  

  2. SS -->
  3. Senior Member
    Join Date
    Mar 2007
    Posts
    12,308
    #2
    You could probably just create reservations and assign them bogus info (you might need to create a new scope to do this).
    Reply With Quote Quote  

  4. SupremeNetworkOverlord Moderator Ahriakin's Avatar
    Join Date
    Oct 2005
    Location
    ::1/128
    Posts
    1,798

    Certifications
    CCIE #23276-Sec, JNCIE-Sec #105, TCSE #2343,MCSE 2003-Sec,LPIC-1
    #3
    Before you block them I'd trace the MAC through your network and try and find the source (run through the MAC address table/port mapping on your switches). Maybe also port-scan and then capture some traffic from it, check your logs etc. Your IP settings are trivial to guess once the attacker has access to a working machine, they just need to copy some details from a valid client and guess at free addresses. Usually this kind of thing is an employee bringing in their own laptops to leech internet bandwidth. More important than just blocking one MAC is stopping the practice before it spreads by making an example....
    Otherwise yup as Dynamik said associate to a blocked IP
    Reply With Quote Quote  

  5. Member
    Join Date
    Aug 2008
    Location
    UK
    Posts
    82

    Certifications
    A+, Network+, CCNA
    #4
    We use dynamik's method of blocking users but our other site uses some software called DHCP Turbo which can stop a given mac address from receiving an IP address from the DHCP server.
    Reply With Quote Quote  

  6. Senior Member
    Join Date
    Apr 2008
    Location
    New York, NY
    Posts
    305

    Certifications
    Life
    #5
    There is a tool for that )
    DHCP Server Callout DLL for MAC Address based filtering - Microsoft Windows DHCP Team Blog - Site Home - TechNet Blogs and if i remember correctly it works for 32bit only.
    Reply With Quote Quote  

  7. Member gandalph's Avatar
    Join Date
    Apr 2006
    Posts
    33
    #6
    Quote Originally Posted by JBrown View Post
    There is a tool for that )
    DHCP Server Callout DLL for MAC Address based filtering - Microsoft Windows DHCP Team Blog - Site Home - TechNet Blogs and if i remember correctly it works for 32bit only.
    the site says it works with 2008 R2 which is 64 bit.
    Reply With Quote Quote  

  8. Junior Member
    Join Date
    Jul 2010
    Posts
    15
    #7
    I have installed the CALLOUTDLL but in the usage they are asking to play around with the registry keys a little bit.
    Is it safe for my DHCP server?
    Reply With Quote Quote  

  9. Senior Member
    Join Date
    Apr 2008
    Location
    New York, NY
    Posts
    305

    Certifications
    Life
    #8
    It all depends on how familiar you are with registry. One thing for sure, make a backup of it before messing around.
    Reply With Quote Quote  

  10. Junior Member Registered Member
    Join Date
    Jan 2012
    Posts
    1
    #9

    Cool Blocking Mac Address with Callout DLL - Video

    Quote Originally Posted by cahmadh View Post
    hi,

    I have a DHCP server and some unknown users are connected to it. I want to block them through MAC address is there any way? or is there any way to block a particular MAC address on my network?
    I found this article that has a video on how to do just that. It works on a WIndows 2003 Server.
    Block Mac Address
    DHCP Block List - Callout DLL - Tech and Web Guy
    Reply With Quote Quote  

+ Reply to Thread

Social Networking & Bookmarks